Release Notes

Parameter Description Range Default
all 802.11 data packets,
action frames and EAPOL
frames over a GRE tunnel
to the controller for
processing. The
controller removes or
adds the GRE headers,
decrypts or encrypts
802.11 frames and
applies firewall rules to
the user traffic as usual.
l Bridge: When an AP is in
bridge mode, data is
bridged onto the local
Ethernet LAN. When in
bridge mode, the AP
handles all 802.11
association requests and
responses,
encryption/decryption
processes, and firewall
enforcement. 802.11e
and 802.11k action
frames are also
processed by the AP,
which then sends out
responses as needed. An
AP in bridge mode
supports only the 802.1x
authentication type.
l Split-Tunnel: Data
frames are either
tunneled or bridged,
depending on the
destination (corporate
traffic goes to the
controller, and Internet
access remains local).
The AP handles all 802.11
association requests and
responses,
encryption/decryption,
and firewall enforcement.
802.11e and 802.11k
action frames are also
processed by the AP,
which then sends out
responses as needed. An
AP in split-tunnel mode
supports only the 802.1x
authentication type.
l Decrypt-Tunnel: An AP
in decrypt-tunnel
forwarding mode
decrypts and
decapsulates all 802.11
frames from a station
and sends the 802.3
frames through the GRE
tunnel to the controller,
Dell Networking W-Series ArubaOS 6.4.x | Reference Guide wlan virtual-ap | 2090